Dual chip smart card and method for using same

ABSTRACT

A smart card is provided comprising a first processor and a second processor. The first and second processors are capable of decoding a scrambled broadcast signal. The first processor is activated by a first activating signal, and the second processor is activated by a second activating signal that differs from the first activating signal. The first processor can be a primary processor that is used during normal operations, while the second processor can be a backup processor that is activated under emergency conditions. The second processor, to be used temporarily when backup service is required, can be of lower complexity than the first processor, thus reducing cost. The first and second processors are situated on the card so as to communicate with an opening in an electrical device such as a integrated receiver. Preferably, the first processor is situated so as to make electrical contact with the receiver within an opening when the card is in a first position, and the second processor is situated so as to make electrical contact with the receiver within the opening when the card is in a second position. Also provided is a method of providing a backup program service to a subscriber. The method comprises providing to the subscriber a smart card of the invention and transmitting a backup activating signal that activates the second, or backup, processor on the smart card. The backup activating signal is transmitted upon failure of the primary processor.

BACKGROUND OF THE INVENTION

1. Field of the Invention

This invention relates to improvements in the design and use of smartcards, and in particular to a smart card having a second processor.

2. Description of the Related Art

A smart card is a well-known security device that is used to permit ordeny access to certain equipment, services or the like. Smart cardsgenerally comprise a small processor having one or more electricalcontacts. When the smart card is inserted into a smart card reader orother device, the electrical contacts on the smart card and similarcontacts in the equipment become intercoupled, allowing the smart cardto share information with the device.

Smart cards are used in integrated receiver devices (IRD) for receivingsatellite broadcast material. All or part of such broadcast material maybe encrypted to limit access to those that have paid the appropriate feeto view the broadcast material. The smart card includes a processorhaving a memory storing control information that enables decryption ofan encrypted television signal for viewing by a user. All broadcastmaterial may be encrypted, thus denying access to all that do notpossess the appropriate smart card. Alternatively, only a portion of thebroadcast material can be encrypted. This allows those without theappropriate smart card to view some, but not all of the channels. Smartcards can also be used to implement pay per view (PPV) services in whichthe user must pay a feed to receive a specific broadcast at a particulartime. Upon receipt of the required fee, the broadcast provider canenable new control signals from the card for access to the otherservices. Further, in some circumstances, the smart card processors areremotely programmable. That is, program instructions implementing theprocessor functions can be received by the IRD and loaded into theprocessor memory, augmenting or substituting for existing processorprogram instructions.

There is currently a risk of a broadcast or other transmission that mayrender all or a large number of the smart card processors in use bysubscribers temporarily or permanently inoperative. In suchcircumstances, new smart cards must be manufactured and distributed toall affected subscribers before the subscribers would be able to againreceive service. This process can take months, putting the broadcastservice provider at risk of losing customers to competing serviceproviders. From the foregoing, it can be seen that there is a need forsmart card that can be rapidly re-activated or replaced followingfailure of a processor or other device on the smart card.

SUMMARY OF THE INVENTION

According to one aspect of the present invention there is provided asmart card comprising a first processor and a second processor, whichcan provide conditional access to broadcast services by, either alone orin combination with other circuits and/or elements, decrypting anencrypted program signal. The decrypting functionality of the firstprocessor can be activated by a first activating signal, and thedecrypting functionality of the second microprocessor can be activatedby a second activating signal that may differ from the first activatingsignal. The first processor is a primary microprocessor that is usedduring normal operation, while the second processor is usable as abackup processor that can be selectively activated under emergencyconditions. In one embodiment, the second processor, which is generallyused temporarily when backup service is required, is of lower complexityand/or capability than the first processor. This allows the smart cardto provide basic functionality, even when the first microprocessorfails, while minimizing cost.

The invention provides for quickly and efficiently bringing backupservice to subscribers in the event that a large group of primarymicroprocessors becomes non-functional. By activating a backup devicealready present in the existing smart cards, long delays in servicewhile new cards are manufactured and distributed can be avoided.

According to a preferred embodiment of the invention, the first andsecond processors are situated on a single smart card so as tooperatively couple with contacts within the IRD. Preferably, the firstprocessor is situated so as to make communicative contact with one ormore of the electrical device contacts when the card is in a firstposition, and the second processor is situated so as to makecommunicative contact with the same or different contac(s) of theelectrical device when the card is in a second orientation. In oneembodiment, the smart card is marked so as to indicate the orientationof the card with respect to the opening.

In a further embodiment of the present invention, a means is providedprevent contact between the receiver and the second processor until suchtime that such contact is desired. In one embodiment, this isaccomplished by scoring the top layer of the card. The scored sectioncan be removed when desired, thereby exposing the second processor andits contacts, and permitting communication with the receiver. In anotherembodiment, this is accomplished by including an adhesive cover that canbe peeled away to reveal the second processor.

According to another aspect of the present invention there is provided amethod of providing backup program service to a subscriber. The methodcomprises providing to the subscriber a smart card of the invention andtransmitting a backup activating signal that activates the second, orbackup, microprocessor on the smart card. The backup activating signalis transmitted upon failure of the primary microprocessor.

Also provided is a system for providing a program signal to subscribers.The system comprises a receiver for receiving signals from a programsource, wherein the signals include program material, a primaryactivating signal and a backup activating signal. The system furthercomprises a smart card comprising a first processor for decryptingreceived signals upon activation by the primary activating signal and asecond processor for decrypting received signals when the backupactivating signal is received by the receiver.

BRIEF DESCRIPTION OF THE DRAWINGS

Reference will now be made, by way of example to the accompanyingdrawings, in which:

FIG. 1 is a diagram showing an overview of a program distributionsystem;

FIG. 2 is a block diagram of an integrated receiver/decoder forpracticing the present invention;

FIG. 3 shows a diagram of a smart card according to a preferredembodiment of the invention;

FIG. 4 is a diagram of an integrated receiver device (IRD) receiving asmart card in a first position according to the invention, under normaloperating conditions;

FIG. 5 is a diagram of an IRD receiving a smart card in a secondposition according to the invention, under emergency or backup operatingconditions;

FIGS. 6A and 6B are diagrams presenting an alternative embodiment of thepresent invention in which the top layer of the card is removable;

FIG. 7 is a diagram presenting an alternative embodiment of the presentinvention including a peel-off cover;

FIG. 8 is a diagram presenting a further alternative embodiment of thepresent invention in which the peel-off cover and the second processoris disposed on a second side of the card; and

FIG. 9 is a flow chart presenting exemplary method steps used topractice one embodiment of the present invention.

DETAILED DESCRIPTION OF PREFERRED EMBODIMENT

In the following description, reference is made to the accompanyingdrawings that form a part hereof, and in which show, by way ofillustration, several embodiments of the present invention. It isunderstood that other embodiments may be utilized and structural changesmay be made without departing from the scope of the present invention.

FIG. 1 is a diagram illustrating an overview of a video distributionsystem 100. The video distribution system 100 comprises a control center102 in communication with an uplink center 104 via communication link114 and with a subscriber 110 via a PSTN or other link 120. The controlcenter 102 provides program material to the uplink 104 center,coordinates with the subscribers 110 to offer pay-per-view (PPV) programservices, including billing and associated decryption of video programs.

The uplink center 104 receives program material and program controlinformation from the control center 102, and using an uplink antenna106, transmits the program material and program control information tothe satellite 108 via uplink 116. The satellite receives and transmitsthe video programs and control information to the subscriber viadownlink 118. The subscriber 110 receives this information using thesubscriber antenna 112. In one embodiment, the subscriber antenna 112 isan 18-inch slightly oval-shaped Ku-band antenna.

The video distribution system 100 can comprise a plurality of satellites108 in order to provide wider terrestrial coverage, to provideadditional channels, or to provide additional bandwidth per channel. Inone embodiment of the invention, each satellite comprises 16transponders to receive and transmit program material and other controldata from the uplink center 104 and provide it to the subscribers 110.However, using data compression and multiplexing techniques the channelcapabilities are far greater. For example, two-satellites 108 workingtogether can receive and broadcast over 150 conventional (non-HDTV)audio and video channels via 32 transponders.

While the invention disclosed herein is described with reference to asatellite based digital video distribution system 100, the presentinvention may also be practiced with terrestrial-based transmission ofprogram information, whether by broadcast, unicast, cable, the Internet,or other means. Further, the different functions collectively allocatedamong the control center 102 and the uplink 104 as described above canbe reallocated between these facilities as desired without departingfrom the intended scope of the present invention.

Although the foregoing has been described with respect to an embodimentin which the program material delivered to the subscriber is video (andaudio) program material such as a movie, the foregoing method can beused to deliver program material comprising purely audio, or anycombination of information as well.

FIG. 2 is a block diagram of an integrated receiver/decoder (hereinafteralternatively referred to as IRD or receiver 200). The receiver 200comprises a tuner/demodulator 204 communicatively coupled to the LNB202. The LNB 202 converts the e.g. 12.2- to 12.7 GHz downlink 118 signalfrom the satellites 108 to, e.g., a 950-1450 MHz signal required by thereceiver's 200 tuner/demodulator 204.

The tuner/demodulator 204 isolates a single, digitally modulatedtransponder, and converts the modulated data to a digital data stream.The digital data stream is then supplied to a forward error correction(FEC) decoder 206. This allows the receiver 200 to reassemble the datatransmitted by the uplink center 104 (which applied the forward errorcorrection to the desired signal before transmission to the subscriber110) verify that the correct data signal was received, and correcterrors, if any. The error-corrected data may be fed from the FEC decodermodule 206 to the transport module via an interface, such as an 8-bitparallel interface.

The transport module 208 performs many of the data processing functionsperformed by the receiver 200. The transport module 208 processes datareceived from the FEC decoder module 206 and provides the desiredprocessed data to the video MPEG decoder 214 and the audio MPEG decoder216. In one embodiment of the present invention, the transport module,video MPEG decoder and audio MPEG decoder are all implemented onintegrated circuits. This design promotes both space and powerefficiency, and increases the security of the functions performed withinthe transport module 208. The transport module 208 also provides apassage for communications between the microcontroller 210 and the videoand audio MPEG decoders 214, 216. As set forth more fully hereinafter,the transport module also works with the access card 212 to determinewhether the subscriber 110 is permitted to access certain programmaterial. Data from the transport module can also be supplied toexternal communication module 226.

The access card 212 functions in association with other elements todecode an encrypted signal from the transport module 208. The accesscard 212 may also be used for tracking and billing these services. Inone embodiment of the present invention, the access card is a smartcard, having contacts cooperatively interacting with contacts in thereceiver 200 to pass information. In order to implement the processingperformed in the access card 212, the receiver 200, and specifically thetransport module 208 provides a clock signal to the access card 212.

Video data may be processed by an MPEG video decoder 214. Using thevideo random access memory (RAM) 236, the MPEG video decoder 214 decodesthe compressed video data and sends it to an encoder or video processor216, which converts the digital video information received from thevideo MPEG module 214 into one or more output signals usable by adisplay or other output device. By way of example, video processor 216may comprise a National TV Standards Committee (NTSC) or AdvancedTelevision Systems Committee (ATSC) encoder. In one embodiment of theinvention both S-Video and ordinary video (NTSC or ATSC) signals areprovided. Other outputs may also be utilized, and are advantageous ifATSC high definition programming is processed.

Audio data is likewise decoded by the audio decoder 215 such as an MPEGor an AC-3 decoder. The decoded audio data may then be sent to a digitalto analog (D/A) converter 218. In one embodiment of the presentinvention, the D/A converter 218 is a dual D/A converter, one for theright and left channels. If desired, additional channels can be addedfor use in surround sound processing or secondary audio programs (SAPs).In one embodiment of the invention, the dual D/A converter 218 itselfseparates the left and right channel information, as well as anyadditional channel information. Other audio formats may similarly besupported.

A description of the processes performed in the encoding and decoding ofvideo streams, particularly with respect to MPEG and JPEGencoding/decoding, can be found in Chapter 8 of “Digital TelevisionFundamentals, by Michael Robin and Michel Poulin, McGraw-Hill, 1998,which is hereby incorporated by reference herein.

Microcontroller 210 receives and processes command signals from theremote control 224, a receiver 200 keyboard interface, and/or anotherinput device. The microcontroller receives commands for performing itsoperations from a processor programming memory, which permanently storessuch instructions for performing such commands. The processorprogramming memory may comprise a read only memory (ROM) 238, anelectrically erasable programmable read only memory (EEPROM) or, similarmemory device. The microcontroller 210 also controls the other digitaldevices of the receiver 200 via address and data lines (denoted “A” and“D” respectively, in FIG. 2).

FIG. 3 is a diagram showing a smart card 212. The smart card 212includes a first or primary processor 302 that, upon insertion into anelectrical device such as the receiver 200, makes communicative contactwith the transport module 208 via one or more primary processor contacts306. In one embodiment, the smart card 212 and its associated interfacesin the receiver 200 is International Standards Organization (ISO) 7816compliant.

The decrypting functions of the primary processor 302 are activated byan activating signal, which is typically provided after the userestablishes a broadcast service account. In one embodiment, theactivating signal comprises a message having a series of numbers orcharacters defining one or more decryption keys. In another embodiment,the activating signal may comprise a series of program instructions(which may also be encrypted) implementing one or more requiredsubfunctions for program material decryption.

The activating signal can be delivered by different media, including,for example, over the air, via a cable line, the Internet, or a modemconnection. Upon activation, the processor decrypting circuit isenabled, so that the encrypted television signal, transmitted by abroadcast service provider, can be decrypted.

The card 212 includes a second or backup microprocessor 304. The secondmicroprocessor 304 can also make communicative contact with the receiver200 via one or more backup processor contacts 308 upon insertion intothe receiver.

The second processor 304 is activated by an activating signal. In oneembodiment, the activating signal for the second processor 304 differsfrom the first activating signal so that the first activating signalwill not activate the second microprocessor 304. In another embodiment,the activating signal is the same as the signal used to active the firstprocessor 302. In this embodiment, retransmission of the firstactivating signal may be ignored by the functioning first processors302, but may activate the second processors 304 on cards 212 havinginoperative first processors 302.

The second activating signal can be provided from the control center 102or uplink 104 by a secondary or backup security server, which formulatescodes from resident algorithms, and broadcasts the codes or otherinformation to the user's receivers 200. If required, the securityserver can be enabled and tested periodically to assure availabilitywhen needed. The first and/or the second activating signals can betransmitted to the receiver 200 via communications link 118 and/orcommunication link 120.

Referring now to FIG. 4, the first processor 302 is situated on the card212 so that an appropriate electrical contact with the receiver 200 ismade upon insertion into the receiver opening 402. The second processor304 is preferably situated on the smart card 212 so that, upon reversingthe orientation of the smart card 212 and inserting the smart card 212into the receiver opening 402 as shown in FIG. 5, the second processor304 is situated on the card 212 so that an appropriate contact with thereceiver 200 is made.

Thus, the first and second microprocessors 302, 304 can be positioned onthe smart card 212 so that switching between use via the firstmicroprocessor 302 and use via the second microprocessor 304 isaccomplished by changing the orientation of the smart card 212. Thearrangement of the primary and backup microprocessors 302, 304 can bepositioned so that orientation of the smart card 212 can be changed by,for example, flipping the smart card 212 in a horizontal dimension or ina vertical dimension. Using this preferred arrangement, the same smartcard 212 and the same electrical contact in the receiver opening 402 canbe employed for both normal and backup or emergency operation.

Preferably, the smart card 212 bears an indication 404 of theappropriate orientation of the card 212 with respect to the opening 402.For example, the card 212 can be marked with an arrow 404 to indicatethe proper end of the card to be inserted into the opening 402 duringnormal operation. Users can be instructed to rotate the card into adifferent orientation with respect to the arrow 404, or in accordancewith a second marking or other indication on the card, for use duringemergency conditions.

The first and second processors 302, 304 can be implemented by one ormore semiconductor chips. Each may share a memory or comprise its ownmemory for storing program instructions and data. The first or primaryprocessor 302 can be designed for normal operation to decode anencrypted program signal with optimal available security and protectionagainst piracy as well as other preferred features. The second or backupprocessor 304 can be functionally equivalent to the first processor 302,or may optionally be designed to provide only a minimal level ofsecurity and other features essential to continued temporary operation.This embodiment has the advantage of preventing pirates from simplysevering the card 212 to obtain two useable cards 212.

For example, the second processor 304 can employ lighter encryptionusing, for example, a smaller number of key characters. The secondprocessor 304 may also implement processing instructions with lessrobust decryption routines, or may include a lower capacity memory thanthe first processor 302. Alternatively or in combination with theforegoing, the second processor 304 may comprise an early generation P1chip or other off-the-shelf device. Minimizing the complexity andfeatures of the backup microprocessor allows for reduced manufacturingcosts. Because the backup microprocessor is used only during emergencyoperations, a simpler and less secure level of service is acceptable.

Because the second or backup processor 304 is activated only by adistinct activating signal that differs from the activating signal usedduring normal operation, the second processor 304 can not be used topirate the broadcast signal during normal operation. During an emergencysituation in which the first microprocessor fails and backup service isnecessary, subscribers could be notified and instructed to change theorientation of the smart card to the correct position for backupservice.

FIGS. 6A and 6B are a diagrams of an alternative embodiment of thepresent invention in which a portion of the top layer of the card isremovable to expose the second processor 304 when needed. In thisembodiment, the top layer 610 of the card 212 is scored with a pluralityof scores 608, thereby defining a removable portion 602. When left inplace, the removable portion 602 prevents communication between thesecond processor 304 and the receiver 200, and also preventscontamination of the second processor 304 and its contacts. In oneembodiment, the removable portion 602 of the top layer 610 of the card212, includes a tab 604, which can be gripped or used for leverage toremove the removable portion 602. Alternatively or in combination withthe foregoing, the top layer 610 of the card 212 includes a void 606,thereby forming a slot between the removable portion 612 and theremainder of the top layer 610 of the card 212. This allows the user toinsert a fingernail or small tool between the removable portion 602 andthe remainder of the card 212 to exert sufficient force to remove theremovable portion.

FIG. 7 is a diagram presenting an alternative embodiment of the presentinvention in which the card 212 includes a peel-off cover 702 to protectthe second processor 304 until it is needed. The cover is affixed to thecard 212 via a suitable adhesive to prevent communications between thesecond processor 304 and the receiver 200 and to prevent contaminationof the second processor 304 and its contacts. The peel-off cover 702 canbe removed by pulling up on an area 704 that has either reduced or noadhesion, or by gripping a tab 706, and pulling the cover off. Ifnecessary, no adhesive may be placed on the cover 702 in areas where theadhesive would otherwise come in contact with the second processor 304or its contacts. This prevents contamination of the contacts by theadhesive. Alternatively, a different adhesive can be used to preventsuch contamination.

FIG. 8 is a diagram presenting another embodiment of the presentinvention, in which a peel-off adhesive cover is used, but in which thesecond processor 304 is disposed on the opposite side of the card 212.To use this embodiment of the card 212 in the emergency mode, the userreverses the orientation of the card and turns the card over so that thesecond processor 304 contacts are in communication with the receiver200.

In this embodiment, the cover 802 is disposed on the second side of thecard 212. The cover may optionally include a non-adhesive or reducedadhesive portion 804 to permit easy removal of the cover 802.Alternatively, a tab 806 may be provided for this purpose. In oneembodiment, the dimensional extent of the cover 804 is substantially thesame as that of the card 212. This embodiment has the advantage ofpresenting an appearance that does not plainly reveal the existence ofthe second processor.

A flow chart presenting exemplary method steps used to practice oneembodiment of the present invention is shown in FIG. 9. First, smartcards 212 are provided to subscribers, as in block 902. The smart cardscan be provided directly to the subscriber by the vendor, or indirectlythrough a third party. Typically, the vendor will want to exert controlover the design and distribution of smart cards to coordinate their usewith other aspects of the program distribution system. Next, the controlcenter 102 sends activating and program signals that are received bysubscribers, as shown in block 904. The smart cards 212 are activatedand serve to decrypt program signals, as in block 906. Subscribers canthen enjoy access to programs.

In the event of failure, as in block 908, for example, should aproblematic signal or other problem cause primary microprocessors tofail, the microprocessors cease to decrypt program signals. In theabsence of a failure, subscribers continue to receive and decryptprogram signals. A failure may lead subscribers to notify the vendor ofthe failure to access programs, as shown in block 910, or the vendor mayalready have become aware of the failure by other means. In response,the vendor seeks to identify the cause of the failure, as in block 912,and determines that the failure is due to inactivated primarymicroprocessors. The vendor then instructs the subscribers to change theorientation of their smart cards to the backup orientation, 916, and asshown in block 918, the control center 102 transmits a backup activatingsignal. The steps shown in blocks 916 and 918 may occur in differentsequences in different embodiments of the method. In response to theinstruction, the subscribers re-insert their smart cards 212 into thereceivers 200 in the backup orientation and resume enjoyment of programmaterial. The smart card system and method disclosed herein avoids theneed to interrupt program service to subscribers while waiting forreplacement of smart cards 212 in the event a number of smart cardsbecome disabled. This invention provides for a quick and efficientemergency card change with a minimal loss of service to the customer.Minimizing the disruption of service to customers reduces the risk oflosing customers to competitors during such emergency situations.

CONCLUSION

A number of embodiments of the invention have been described herein, butit will be evident to the skilled person that numerous alternativeembodiments may also be adopted. Such alternative embodiments will alsoaccomplish the objective of providing backup services that can beactivated during an emergency situation.

For example, although the foregoing has been described with respect tothe use of a backup microprocessor, the devices and techniques disclosedherein can be used to provide backup capability for function-criticalcomponents. Further, the smart card 212 can be any type of device thatprovides conditional access to a service. Although such devices aretypically the approximate size and shape of a credit card, other sizesand shapes can be used to accomplish the same objective of providingaccess. The system and method of the invention can be adapted to othertypes of conditional access systems in which emergency or backup accessis provided via a separately activated backup component located on thesame device that is used for normal operations.

It is intended that the scope of the invention be limited not by thisdetailed description, but rather by the claims appended hereto. Theabove specification, examples and data provide a complete description ofthe manufacture and use of the composition of the invention. Since manyembodiments of the invention can be made without departing from thespirit and scope of the invention, the invention resides in the claimshereinafter appended.

1. A smart card, comprising: a first processor, for decrypting anencrypted program signal; a second processor, for decrypting theencrypted program signal; wherein the first processor is activated by afirst activating signal and the second processor is activated by asecond activating signal differing from the first activating signal, thefirst and second processors are communicable with an electrical devicefor receiving the program signal, the first activating signal and thesecond activating signal, and the first processor is disposed tocommunicate with the device when the card is in a first orientation, andthe second processor is situated so as to communicate with the devicewhen the card is in a second orientation.
 2. The apparatus of claim 1,further comprising a cover, removably attached to the smart card so asto prevent communication between the second processor and the electricaldevice.
 3. The apparatus of claim 1, wherein the smart card furthercomprises a removable portion covering the second processor so as toprevent communications between the second processor and the electricaldevice.
 4. The apparatus of claim 3, wherein the removable portioncomprises a tab for gripping and removing the removable portion to allowcommunications between the second processor and the electrical device.5. The apparatus of claim 3, wherein the smart card comprises a toplayer and the removable portion is peripherally described by scores inthe top layer.
 6. The apparatus of claim 5, wherein the smart cardfurther comprises a void disposed adjacent the removable portion.
 7. Theapparatus of claim 1, wherein the first processor is disposed on a firstside of the smart card, and the second processor is disposed on a secondside of the smart card, and wherein the apparatus further comprises: acover, removably attached to the second side of the smart card so as toprevent communications between the second processor and the electricaldevice.
 8. The apparatus of claim 7, wherein an extent of the coversubstantially coincides with an extent of the smart card.
 9. Theapparatus of claim 7, wherein the cover comprises a tab.
 10. Theapparatus of claim 7, wherein the cover is adhesively secured to thesmart card.
 11. The apparatus of claim 7, wherein a portion of the coveris adhesively secured to the smart card.
 12. The apparatus of claim 1,further comprising an indication of the first orientation of the card.13. The apparatus of claim 1, wherein the electrical device is anintegrated receiver device.
 14. The apparatus of claim 1, wherein thesecond processor is of lower complexity than the first processor.
 15. Amethod of providing a backup program device to a subscriber, the methodcomprising the steps of: providing to the subscriber a smart card havinga primary processor that decodes a scrambled program signal uponactivation by a primary activating signal, and a backup processor thatdecodes a scrambled program signal upon activating by a backupactivating signal; and transmitting the backup activating signal whenthe primary activating signal is insufficient to enable decoding of thescrambled program signal; and wherein the primary processor comprisescontacts disposed so as to communicate with the back up program devicewhen the smart card is in a first orientation, and the backup processorcomprises contacts disposed so as to communicate with the back upprogram device when the smart card is in a second orientation.
 16. Themethod of claim 15, wherein the backup activating signal is transmittedupon failure of the primary processor.
 17. The method of claim 15,wherein the primary and backup processors communicate with an electricaldevice for receiving the program signal, the primary activating signaland the backup activating signal.
 18. The method of claim 15, whereinthe smart card further comprises an indication of the first orientationof the smart card.
 19. The method of claim 15, wherein the backupprocessor is of lower complexity than the primary processor.
 20. Asystem for providing a program signal to subscribers comprising: areceiver for receiving signals from a program source, wherein thesignals include program material, a primary activating signal and abackup activating signal; and a smart card comprising a first processorfor decrypting received signals upon activation by the primaryactivating signal and a second processor for decrypting received signalswhen the backup activating signal is received by the receiver; andwherein the primary processor is situated so as to communicate with thereceiver when the smart card is in a first orientation, and the backupprocessor is situated so as to communicate with the receiver when thesmart card is in a second orientation.
 21. The system of claim 20,wherein the backup activating signal is transmitted upon failure of theprimary processor.
 22. The system of claim 20, wherein the primary andbackup processors are situated in the smart card so as to communicatewith the receiver.
 23. The system of claim 20, wherein the smart cardfurther comprises an indication of the first orientation of the card.24. The system of claim 20, wherein the backup processor is of lowercomplexity than the primary processor.
 25. A smart card apparatus,comprising: a primary processor, for decrypting an encrypted programsignal; and a back up processor, for decrypting the encrypted programsignal; wherein the primary processor is activated by a primaryactivating signal and the backup processor is activated by a backupactivating signal differing from the primary activating signal; andwherein the primary processor is disposed to communicate with a devicewhen the smart card is in a first orientation, and the backup processoris situated so as to communicate with the device when the smart card isin a second orientation.
 26. The apparatus of claim 25, wherein theprimary and backup processors are communicable with an electrical devicefor receiving the program signal, the primary activating signal and thebackup activating signal.
 27. The apparatus of claim 26, furthercomprising a cover, removably attached to the smart card so as toprevent communications between the backup processor and the electricaldevice.
 28. The apparatus of claim 26, wherein the smart card furthercomprises a removable portion covering the backup processor so as toprevent communications between the backup processor and the electricaldevice.
 29. The apparatus of claim 28, wherein the removable portioncomprises a tab for gripping and removing the removable portion to allowcommunications between the backup processor and the electrical device.30. The apparatus of claim 28, wherein the smart card comprises a toplayer and the removable portion is peripherally described by scores inthe top layer.
 31. The apparatus of claim 28, wherein the smart cardfurther comprises a void disposed adjacent the removable portion. 32.The apparatus of claim 26, wherein the primary processor is disposed ona first side of the smart card, and the backup processor is disposed ona second side of the smart card, and wherein the apparatus furthercomprises: a cover, removably attached to the second side of the smartcard so as to prevent communications between the backup processor andthe electrical device.
 33. The apparatus of claim 32, wherein an extentof the cover substantially coincides with an extent of the smart card.34. The apparatus of claim 32, wherein the cover comprises a tab. 35.The apparatus of claim 32, wherein the cover is adhesively secured tothe smart card.
 36. The apparatus of claim 32, wherein a portion of thecover is adhesively secured to the smart card.
 37. The apparatus ofclaim 25, further comprising an indication of the first orientation ofthe smart card.
 38. The apparatus of claim 25, wherein the device is anintegrated receiver device.
 39. The apparatus of claim 25, wherein thebackup processor is of lower complexity than the primary processor. 40.The apparatus of claim 25, wherein backup processor is activated withthe backup activating signal after failure of the primary processor.